CVE-2021-40352: Medium severity open-emr Openemr vulnerability
Published Sep 1, 2021
·Updated
OpenEMR 6.0.0 has a pnotesprint.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users.
Affected Software
1 affected component
open-emr Openemr=6.0.0
Event History
Sep 1, 2021
Exploit Published
via GitHub·07:39 AM
CVE Published
via MITRE·12:20 PM
Data Sourced
via MITRE·12:20 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-40352?
CVE-2021-40352 is an Insecure Direct Object Reference vulnerability in OpenEMR 6.0.0.
2
What is the severity of CVE-2021-40352?
CVE-2021-40352 has a severity rating of 6.5 (medium).
3
How does CVE-2021-40352 impact OpenEMR?
CVE-2021-40352 allows an attacker to read the messages of all users in OpenEMR 6.0.0.
4
How can I fix the CVE-2021-40352 vulnerability in OpenEMR?
To fix the CVE-2021-40352 vulnerability, you should apply the recommended security patches or updates provided by OpenEMR.
5
Where can I find more information about CVE-2021-40352?
You can find more information about CVE-2021-40352 on the official OpenEMR website, as well as the provided references.